[GeoNetwork-devel] Problems changing admin password in geonetwork 2.2.x

GeoNetwork GeoNetwork Developer
1

Hi developers:

I found an error updating the password of users in geonetwork

this is the part of code of PwUpdate.java where the problem was originated:

String password = Util.scramble(Util.getParam(params,Params.PASSWORD));
String password = Util.scramble(Util.getParam(params,Params.NEW_PASSWORD));

I suppose that the method scramble of util converts the string to an md5 representation
or something similar, the problem here is that password is already in its md5 form
so there is not need to pass the password param through scramble method, the fix
is the following:

String password = Util.getParam(params,Params.PASSWORD);
String password = Util.scramble(Util.getParam(params,Params.NEW_PASSWORD));

And this way the password update works without problem.

Regards
Godofredo Contreras

Use video conversation to talk face-to-face with Windows Live Messenger. Get started!

2

Hi Godofredo,
Thanks for your email!
I tried to reproduce your error and failed :frowning: (or :slight_smile: from my perspective). I also tested changing password for both admin and for a newly created user and had no problems. I would need more detailed explanation I think. I also looked at your fix and it broke the password changing option when testing.
Ciao,
Jeroen

On Apr 2, 2008, at 7:24 PM, godofredo contreras wrote:

Hi developers:

I found an error updating the password of users in geonetwork

this is the part of code of PwUpdate.java where the problem was originated:

String password = Util.scramble(Util.getParam(params,Params.PASSWORD));
String password = Util.scramble(Util.getParam(params,Params.NEW_PASSWORD));

I suppose that the method scramble of util converts the string to an md5 representation
or something similar, the problem here is that password is already in its md5 form
so there is not need to pass the password param through scramble method, the fix
is the following:

String password = Util.getParam(params,Params.PASSWOR D) il.scramble(Util.getParam(params,Params.NEW_PASSWORD));

And this way the password update works without problem.

Regards
Godofredo Contreras

Use video conversation to talk face-to-face with Windows Live Messenger. Get started! -------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It’s the best place to buy or sell services for
just about anything Open Source.
http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace

GeoNetwork-devel mailing list
[https://lists.sourceforge.net/lists/listinfo/geonetwork-devel](mailto:GeoNetwork-devel@anonymised.com
.66…
work-devel@lists.sourceforge.net
<a href=)
GeoNetwork OpenSource is maintained at http://sourceforge.net/projects/geonetwork

3

Hi:

This is weird, I have downloaded the code from 2.2.x branch, and from trunk,
compiled using netbeans under windows and deployed into tomcat6 in windows
machine and tomcat5 under linux and both of them give an exception when I try
to change password.

Regards
Godofredo Contreras

Date: Wed, 2 Apr 2008 22:56:43 +0200
From: Jeroen.Ticheler@anonymised.com
Subject: Re: [GeoNetwork-devel] Problems changing admin password in geonetwork 2.2.x
To: frdcn@anonymised.com.22…
CC: geonetwork-devel@lists.sourceforge.net

Hi Godofredo,
Thanks for your email!
I tried to reproduce your error and failed :frowning: (or :slight_smile: from my perspective). I also tested changing password for both admin and for a newly created user and had no problems. I would need more detailed explanation I think. I also looked at your fix and it broke the password changing option when testing.
Ciao,
Jeroen

On Apr 2, 2008, at 7:24 PM, godofredo contreras wrote:

Hi developers:

I found an error updating the password of users in geonetwork

this is the part of code of PwUpdate.java where the problem was originated:

String password = Util.scramble(Util.getParam(params,Params.PASSWORD));
String password = Util.scramble(Util.getParam(params,Params.NEW_PASSWORD));

I suppose that the method scramble of util converts the string to an md5 representation
or something similar, the problem here is that password is already in its md5 form
so there is not need to pass the password param through scramble method, the fix
is the following:

String password = Util.getParam(params,Params.PASSWORD) il.scramble(Util.getParam(params,Params.NEW_PASSWORD));

And this way the password update works without problem.

Regards
Godofredo Contreras

Use video conversation to talk face-to-face with Windows Live Messenger. Get started! -------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It’s the best place to buy or sell services for
just about anything Open Source.
http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace

GeoNetwork-devel mailing list
https://lists.sourceforge.net/lists/listinfo/geonetwork-devel
GeoNetwork OpenSource is maintained at http://sourceforge.net/projects/geonetwork

More immediate than e-mail? Get instant access with Windows Live Messenger.